WordPress Audits
A structured review of an existing WordPress platform, covering code, security, performance, accessibility, and plugins. You receive a written report with the findings ranked by priority, so you know what to fix first.
Know what you are running before you decide what to do next.
A WordPress platform that has been live for a few years usually carries more than anyone has written down: plugins added for a single campaign, custom code from a developer who has moved on, updates postponed because nobody was sure what they would break.
An audit makes that visible. We review the platform end to end and give you a written report: what is sound, what is at risk, and what to fix in which order. It is the same review we run before we take on any platform for maintenance, a redesign, or a migration.
The report is yours. Act on it with us, with your own team, or with another developer.
When it fits
- Platforms inherited from another developer
- Before a redesign, rebuild, or migration
- After a security incident or a slowdown
- Before starting a maintenance retainer
Five areas, one written report.
- 01
Code review
Theme and custom plugin code checked for quality, WordPress coding standards, and how maintainable it is.
- 02
Security review
Configuration, user roles and permissions, outdated components, and known vulnerabilities.
- 03
Performance review
Core Web Vitals, caching, database health, images, and hosting configuration.
- 04
Accessibility review
Key templates and user journeys checked against WCAG guidelines.
- 05
Plugin review
Every plugin assessed: what it does, whether it is maintained, and whether it is still needed.
- 06
Written report and priorities
Findings in plain language, ranked by priority, with a recommended order of work.
Already know you need ongoing care? Platform Maintenance & Security starts with the same onboarding audit.
See Platform Maintenance & SecurityHow an audit runs.
A fixed, focused piece of work with a written outcome.
- 01
Access
We agree access, ideally to a staging copy, so the review does not touch the live platform.
- 02
Review
We work through code, security, performance, accessibility, and plugins.
- 03
Report
A written report with every finding ranked by priority.
- 04
Walkthrough
We take you through the findings and agree what happens next.
An audit often becomes the first step of a redesign, a migration, or a maintenance retainer.
See our full processFrequently asked questions
Can you audit a platform someone else built?
Yes. We onboard any WordPress platform after an initial audit, whether we built it or not.
Will the audit affect our live site?
No. We work from agreed access, ideally a staging copy, and do not change anything on the live platform during the review.
Do we have to use WPFlat to fix the issues?
No. The report is yours. You can act on it with us, with your own team, or with another developer.
Does the audit cover accessibility in full?
It reviews key templates and journeys against WCAG. For a full accessibility audit with remediation, see Accessibility (WCAG).
Tell us what you need WordPress to do.
A new website, a redesign, a client portal, a booking system, or a move from another platform. Tell us what you need and we will tell you how WordPress can carry it.
What happens next
- 01Introductory callUnderstanding the project, the organisation, and the brief.
- 02Discovery questionnaireThe detail we need before designing anything.
- 03Scope agreementDeliverables, timeline, and investment confirmed in writing.